ON BALANCED SUBGROUPS OF THE MULTIPLICATIVE GROUP 
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In memory ofAlfvan der Poorten 

Abstract. A subgroup H of G = (Z/dZ) x is called balanced if every coset of H is evenly 
distributed between the lower and upper halves of G, i.e., has equal numbers of elements with 
representatives in (0, d/2) and (d/2, d). This notion has applications to ranks of elliptic curves. We 
give a simple criterion in terms of characters for a subgroup H to be balanced, and for a fixed integer 
p, we study the distribution of integers d such that the cyclic subgroup of (Z/cK) x generated by p 
is balanced. 



1. Introduction 

Let d > 2 be an integer and consider = (Z/dZ) x , the group of units modulo d. Let A d be the 
first half of U^; that is, A d consists of residues with a representative in (0, d/2). Let B d = U d \ A d 
be the second half of U^. We say a subgroup H of is balanced if for each u G we have 
\uH fl A d \ = \uH C\ B d \; that is, each coset of H has equally many members in the first half of 
as in the second half. 

Our interest in this notion stems from the following result. 

Theorem 1.1 (B21). Let p be an odd prime number, let ¥ q be the finite field of cardinality q = pf, 
and let ¥ q (u) be the rational function field over ¥ q . Let d be a positive integer not divisible by p, 
and for e a divisor of d write {p) e for the cyclic subgroup o/(Z/eZ) x generated by p. Let E d be 
the elliptic curve over W q (u) defined by 

y 2 = x(x + l)(x + u d ). 



Then we have 

RankE d (¥ q {u)) 




n^T V (p)e i s balanced, 
if not. 



Here (p is Euler's function and l q (e) is the order of q in (Z/e'Z) x . 

A few simple observations are in order. It is easy to see that (—1) is a balanced subgroup of U^. 
It is also easy to see that if 4 | d, then (|d + 1} is a balanced subgroup of U^. In addition, if H is 
a balanced subgroup of and K is a subgroup of containing H, then K is balanced as well. 
Indeed, K is a union of [K : H] cosets of H, so for each u e U^, uK is a union of [K : H] cosets 
of H, each equally distributed between the first half of and the second half. Thus, uK is also 
equally distributed between the first half and the second half. 
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It follows that if some power of p is congruent to —1 modulo d and if q = 1 (mod d), then the 
theorem implies that Rank E(¥ q (u)) = d — 2 if d is even and d— 1 if d is odd. The rank of E when 
some power of p is — 1 modulo d was first discussed in [fl2|. and with hindsight it could have been 
expected to be large from considerations of "supersingularity." The results of [0 show, perhaps 
surprisingly, that there are many other classes of d for which high ranks occur. Our aim here is to 
make this observation more quantitative. 

More precisely, the aim of this paper is to investigate various questions about balanced pairs 
(p, d), i.e., pairs such that (p) is a balanced subgroup of (Z/dZ) x . In particular, we give a simple 
criterion in terms of characters for (p, d) to be balanced (Theorem 12 .11 ), and we use it to determine 
all balanced subgroups of order 2 (Theorem 13 .2) . We also investigate the distribution for a fixed p 
of the set of d's such that (p, d) is balanced (Theorems 14.11 14.21 ). We find that when p is odd, the 
divisors of p n + 1 are not the largest contributor to this set. Finally, we investigate the average rank 
and typical rank given by Theorem ll.ll for fixed q and varying d. 

2. Balanced subgroups and characters 

In this section we write G (rather than U^) for (Z/gB) x . We also write A for Ad as above and 
similarly for B, so that G is the disjoint union AU B. 

We write 1a for the characteristic function of A C G and similarly for 1b- Let / : G — > C be 
the sum over H of translates of 1a — 1b'- 

f(g) = J2 {UW - l B {gh)) 

heH 

= #( s ffni)-#( ff FnB). 

By definition, H is balanced if and only if / is identically zero. 

We write G for the set of complex characters of G, and we expand / in terms of these characters: 

where 

It is easy to see that f(xtriv) = 0. Noting that 1 A — 1b = 21a — 1<2> for X non-trivial we find 
that 



/V 1 ) 



<p(d) 



\heH J \a&A J 



Note that J2 heH x{h) ls zero if an d only if the restriction of x to if is non-trivial. We introduce 
the notation 

We view x as a Dirichlet character, so that we also have 

E *(< 

0<a<d/2 



c x = > x\a) 
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As usual, we say x is even if x(— 1) = 1 and \ is °dd if x{~ 1) — — 1- Note that if % is even an d 
non-trivial, then 

C X =nE X ^ = - 

geG 

This discussion yields the following characterization of balanced subgroups: 

Theorem 2.1. With notation as above, we have that H is balanced if and only ifc x = Ofor every 
odd character x°fG whose restriction to H is trivial. 

□ 

As an example, note that if H = ( — 1), then there are no odd characters trivial on H and so the 
theorem implies that H is balanced. 

We now give a non-vanishing criterion for c x . 

Lemma 2.2. If x is a primitive, odd character of G, then c x ^ 0. 

Proof. Under the hypotheses on x, the classical evaluation of L(l, x) leads to the formula 

d{ X -\2)-2) 

where t(x _1 ) is a Gauss sum. (See, e.g., d pp. 200-201] or [[81 Theorem 9.21], though there is a 
small typo in the second reference.) By the theorem of Dirichlet, L(l, x~ l ) 7^ and so c x ^ 0. □ 

In light of the lemma, we should consider imprimitive characters. 

Lemma 2.3. Suppose that £ is a prime number dividing d and set d' = d/t. Suppose also that x is a 
non-trivial character modulo d induced by a character x' modulo d! . If£ = 2, then c x = — x'(2)c x '. 
If t is odd, then c x — (1 — x'(^)) c x'- Here we employ the usual convention that x'W = I d'. 

Proof. First suppose i = 2. We have 

c x= Yl *( a ) = E x '^- 

a<d/2 a<d' 
gcd(o,d)=l gcd(a,2d')=l 

If 2 | d', this is a complete character sum and so vanishes. If 2 / d', then 

£ X'(a)= J2 X'(a)- £ * (2a) 

a<d! a<d' a<d' /2 

gcd(a,2d')=l gcd(a,d')=l gcd(M')=l 



%<d'/'. 
l(a,d') 



a<d'/2 
gcd(a,d')=l 



as desired. 

Now assume that £ is odd. We have 



c x= £ *( a ) = £ x '( a )' 

a<d/2 a<id'/2 
gcd(a,d)=l gcd(a^d')=l 
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lf£ I d',then 



E = E 

a<M/2 a<d'/2 
gcd(a,£d')=l gcd(o,d') =1 



If£ /d'.then 



E x'( fl )= E x'w- E 

a<ed'/2 a<£d'/2 a<d' /2 

gcd(o,W) =1 gcd(a,d') =1 gcd(o,d')=l 

= E X'W-X'W E X'(a) 

a<d'/2 a<d'/2 
gcd(a,d')=l gcd(a,d')=l 

= (1-X'W)C X ' 

as desired. □ 

Applying the lemma repeatedly, we arrive at the following non- vanishing criterion. 

Proposition 2.4. Suppose that x is an odd character modulo d induced by a primitive character 
x' modulo d'. Then c x ^ if and only if the following two conditions both hold: (z) 4 / d or d/d' 
is odd; and (ii)for every odd prime £ which divides d and does not divide d', we have x'(fy 1- 

As an example, suppose that 4 | d and H = (|d + 1). Note that 

(Z/rfZ) x /(irf+l) ^ (Z/|rfZ) x . 

Thus, if x is an odd character modulo d and 1) = 1, then the conductor d' of x divides d/2. 

This shows that d/d! is even and so condition (i) of the proposition fails and c x = 0. Therefore H 
is balanced. 



3. Balanced subgroups of small order 

In this section, we discuss balanced subgroups of small order. We have already seen that a 
subgroup of G which contains — 1 or \d + 1 is balanced. We will show that in a certain sense small 
balanced subgroups are mainly controlled by these balanced subgroups of order 2. 

Theorem 3.1. For every positive integer n there is an integer d(n) such that if d > d(n) and H is 
a balanced subgroup ofG = (Z/gK) x of order n, then either —\EHorA\d and \d+ 1 G H. 

We can make this much more explicit for subgroups of order 2: 

Theorem 3.2. A subgroup H = (h) of order 2 is balanced if and only if d and h satisfy one of the 
following conditions: 

(1) h = -l (mod d) 

(2) d = (mod 4) and h = \d + 1 (mod d) 

(3) d — 24 and h = 17 (mod d) or h = 19 (mod d). 

(4) d = 60 and h = 41 (mod d) or h = 49 (mod d). 
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Proof of Theorem 1X71 Using Proposition 12.41 we will show that if d is sufficiently large with re- 
spect to n, then for any subgroup H C (Z/<iZ) x of order n which does not contain — 1 or \d+ 1, 
there is a character x which is odd, trivial on H, and with c x ^ 0. By Theorem 12. 1[ this implies 
that H is not balanced. 

Note that a balanced subgroup obviously has even order, so there is no loss in assuming that n 
is even. We make this assumption for the rest of the proof. 

Let H + be the subgroup of G generated by H, — 1 and, if 4 | d, by \d + 1. Fix a character xo 
of G which is trivial on H, odd, and — 1 on \d + 1 if 4 | d. The set of all characters satisfying 

these restrictions is a homogeneous space for G/H + C G. We will argue that multiplying xo by a 

suitable ip E G/H + yields a x = Xo'fp f° r which Proposition I2.4l implies that c x ^ 0. 

Note first that any character x which is odd and, if 4 | d, has x{\d + 1) = — 1 automatically 
satisfies condition (i) in Proposition 12.41 Indeed, if 4 | d, then the condition x{\d + 1) = — 1 
implies that x is 2-primitive, i.e., the conductor d! of % nas d/d' odd. The rest of the argument 
relates to condition (ii) in Proposition 12.41 

Write d = H £ l ee and write G e for (Z/f^Z) x so that G = U e G e . Let x = UeXi- Note that £ 
divides the conductor of x if an d only if xi is non-trivial. 

We will sloppily write Ge/H + for Ge modulo the image of H + in Ge,. For odd I, Ge is cyclic 
and therefore so is Ge/H + ; for £ = 2, since — 1 G H + , C7 2 / H + is also cyclic. 

Note also that H + is the product of H and a group of exponent 2, namely the subgroup of G 
generated by —1 or by —1 and \d + 1. Also, we have assumed that n = \H\is even. If £ is odd, 
then Ge is cyclic of even order, so has a unique element of order 2. It follows that the order of the 
image of H + in Ge divides n. 

We define three sets of odd primes: 

S l = {odd£:£ | d, Ge/H + = {1}}, 
S 2 = {odd £:£\d, if(£ ee ) | n} , 

and 

S 3 = {odd i : <p(£) | n} . 

Note that S 1 C S 2 C S 3 and S3 depends only on n, not on d. 

If £ is odd, £ I <i, and £ ^ Si, then Gi/H + is non-trivial. Thus choosing a suitable ^, we may 
arrange that the conductor of Xi — Xo4> is divisible by every prime dividing d which is not in Si. 

For the odd primes £ which divide d and do not divide the conductor of xi ( a subset of Si, thus 
also a subset of S3), we must arrange that x'W 1 (where x' is the primitive character inducing 
X)- 

Recall that Ge/H + is cyclic. We now remark that if C is a cyclic group and a 6 C, and z 6 C, 
then the set of characters ip : C — V C such that 7^ 2 has cardinality at least |C|(1 — l/|(a)|) 
(where | (a) | is the order of a). If we have several elements ax, . . . , a n and several values Zx, ■ ■ ■ , z n 
to avoid, then the number of characters ip such that ^(a^) 7^ Zj is at least 



IK)!/' 

Thus we can find such a character provided that each has order > n. 
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Now we use that d is large to conclude that a large prime power t e divides d. (Note that £ might 
be 2 here.) Then Ge/H + is a cyclic group in which the order of each prime in Si is large. (The 
primes in Si are also in S3, so belong to a set fixed independently of d.) We want a character ip 
of Gg/H + which satisfies ^(r) 7^ Xi 1 ^) f° r ai l r & Si. We also want ipxi to have non-trivial £ 
component which, phrased in the language above, means that we want ip(a) 7^ 1 for some fixed 
generator of Gi/H + . Since the size of Si is fixed depending only on n, the discussion of the 
previous paragraph shows that these conditions can be met if £ e is large enough. 

Setting x = V'Xi w i m V" as m the previous paragraph yields a character x sucn that c x 7^ 0, and 
this completes the proof. □ 

Proof of Theorem \3?2\ We retain the concepts and notation of the proof of Theorem 13.11 We also 
say that a subgroup of order 2 is "exceptional" if it does not contain —1 or ^d + 1. 

Since n = 2, the set S 3 = {3} and the set S 2 is either empty (if 3 / d or 9 | d) or S 2 = {3} 
(if 3 exactly divides d). If S 2 is empty and H is an exceptional subgroup of order 2, then the first 
part of the proof of Theorem B.ll provides a primitive odd character trivial on H, and so H is not 
balanced. 

Suppose we are in the case where 3 exactly divides d. Following the first part of the proof of 
Theorem 13 . 1 L we have a character xi of G with conductor divisible by d! = d/3 which is odd, 
trivial on H, and, if 4 | d, satisfies Xi{\d + 1) = — 1- If the conductor of xi is d or if the primitive 
character x' inducing xi nas 7^ 1, then setting x = Xi we nave c x /0 and we see that H is 
not balanced. 

If not, we will modify xi- Note that if £ = 2 and 16 | d, or £ = 5 and 25 | d, or £ is a prime > 7 
and £ | d, then the order of 3 in Gi/H + is at least 3. Thus in these cases, there is a character ip of 
Ge/H + so that the £ part of x = xi^ ls non-trivial and so that the primitive character x' inducing 
X satisfies x'(3) 7^ 1. Then c x 7^ and H is not balanced. 

This leaves a small number of values of d to check for exceptional balanced subgroups of order 
2. Namely, we just need to check divisors of 8 • 3 • 5 = 120 which are divisible by 3. A quick 
computation which we leave to the reader finishes the proof. □ 



4. Distribution of numbers d with (p) d balanced 

Fix an integer p with \p\ > 1. In our application to elliptic curves, p is an odd prime number, but 
it seems interesting to state our results on balanced subgroups in a more general context. Let B p 
denote the set of integers d > 2 coprime to p for which (p)d is a balanced subgroup of U^. Further, 
let 

B pfi = {d>2: (d,p) = 1, 4 I d, \d + l G (p) d }, 
B p ^ = B p \ Bpfi, 

B p ,i = {d>2:{d,p) = l, -lE(p)i}. 

Note that if p is even then B Pt0 is empty. For any set A of positive integers and x a real number at 
least 1, we let .4.(2) = [^4 n [l,x]\. 

We state the principal results of this section, which show that when p is odd, most members of 
Bp lie in £> Pi0 - 
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Theorem 4.1. For each odd integer p with \p\ > 1, there are positive numbers b p , b' with 



' < B p>0 (x) < b' ' 



p log log x p ' p log log X 

for all sufficiently large numbers x depending on the choice of p. 

Theorem 4.2. For each integer p with \p\ > 1, there is a number e p > such that for all x > 3, 

x 

(logx) e p / 

We remark that B p> \ has been studied by Moree. In particular we have the following result. 

Theorem 4.3 ([9, Thm. 5]). For each integer p with \p\ > 1 there are positive numbers c p , 5 P such 
that 

B p>1 (x) ~ c p - - r , x oo. 

(logx) d p 

Note that for p prime we have 8 P — |. We believe that B P: o and B P: i comprise most of B p and in 
fact we pose the following conjecture. 

Conjecture 4.4. For each integer p with \p\ > 1 we have 

B p (x) = B P:0 (x) + (1 + o(l))£> Pi i(x), x -)■ oo, 

that is, B Pt *(x) ~ B Pt \(x) as x — >■ oo. 

It is easy to see that B P: i fl B P:0 has at most one element. Indeed, the cyclic group (p)d has 
at most one element of order exactly 2, so if d 6 B p> i fl B Pt0 , then for some / we have pf = 
— 1 = |d + 1 (mod d) and this can happen only when d = 4. This at least shows that B p (x) > 
Bp,o(x) + (1 + o(l))B Pi i(x) as x — > oo. 

We now begin a discussion leading to the proofs of Theorems 14. 1 1 and 14.21 The following useful 
result comes from [4, Theorem 2.2]. 

Proposition 4.5. There is an absolute positive constant c such that for all numbers x > 3 and any 
set TZ of primes in [l,x], the number of integers in [1, x] not divisible by any member ofTZ is at 
most 



cx 



Note that the inequality in the display follows immediately from the inequality 1 — 9 < e~ 9 for 
every 9 e (0, 1). 

For a positive integer m coprime to p, recall that l p (m) denotes the order of (p) m . If r is a prime, 
we let v r (m) denote that integer v with r v \ m and r v+1 / m. 

We would like to give a criterion for membership in B p $, but before this, we establish an ele- 
mentary lemma. 

Lemma 4.6. Let p be an odd integer with \p\ > 1 and let k, i be positive integers. Then 
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Proof. The result is clear if % — 1. If % > 1, we see that 

^^ = (p 2fc + l)(p 4fc + l)...(^ lfc + l), 

which is a product of i — 1 factors that are each 2 (mod 4). □ 

The following result gives a criterion for membership in B P fi. 

Proposition 4.7. Let p be odd with \p\ > 1 and letm> 1 &e an odd integer coprime to p. Ifl p {m) 
is odd, then 2 J m G S Pi0 if and only if j = 1 + v 2 {p — 1) or j > v 2 {p 2 — 1). Ifl p {m) is even, then 
2 j m G B pfl if and only if j > v 2 {p lp{m) - 1). 

Proof. We first prove the "only if" part. Assume that d = 2- J m G B Pj0 and let / be an integer 
with pf = \d + 1 (mod d). Then Z p (m) | / so that j -1 = v 2 {p f - 1) > v 2 (p lpi - m) - 1). This 
establishes the "only if" part if l p (m) is even, and it also shows that j > 1 + v 2 (p — 1) always, so 
in particular if l p (m) is odd. Suppose l p (m) is odd and 1 + v 2 (p — 1) < j < v 2 (p 2 — 1). Then 
j — 1 > v 2 (p — 1), so that l p (2^~ 1 m) is even. Using l p (m) odd, this implies that 2l p {m) \ f, so that 
2 J | (p 2 — 1) | (p^ — 1), contradicting^ = hd + 1 (mod d). 



Towards showing the "if" part, let t> = w 2 (p' p(m) - 1). We have pW m ) — 1 = 2"m (mod 2 
so that 2 l ' +1 m G B p $. If j > f + 1 and l p (m) is even, then with / = 2i~ v ~ l l p (m), Lemma l4~6l 
implies that — 1 = 2^ 1 m (mod 2 J m), so that 2- 7 m G B Pi o. If / p (m) is odd, then v = v 2 (p — 1), 
so that 2 V+1 G B p x). Finally assume that j > v 2 (p 2 — 1) and l p (m) is odd. Then Lemma l4T6l implies 

that p 23 " 2 P 1) 'p(' m ) — 1 = 2 J ~ 1 m (mod 2- ? m), so that 2 J m G S Pi o. This concludes the proof. □ 
Proof of Theorem \4J\ For m > 1 coprime to 2p, let 

/ P (m) := W2 (p^ (m) - 1) , /;(m) := max {/ p (m), u 2 (p 2 - l) } . 

Proposition 14.71 implies that if 2 J m G i3 Pi0 with m odd, then j > f p (m). Further, if (m, 2p) = 1 
then 2 J m G i3 P;0 for all j > f'(m). 

Using this last property, we have B Pi q(x) at least as big as the number of choices for m coprime 
to 2p with 1 < m < x/2^ m ) +1 . Thus, the lower bound in the theorem will follow if we show that 
there are at least b p x/ log log x integers m coprime to 2p with m < x/2^ m ^ +1 . 

Let A(m) denote Carmichael's function at m, which is the order of the largest cyclic subgroup 
of U m . Then l p (m) \ A(m). Also, for m > 2, A(m) is even, so that 

f p (m) < 9p (m) := v 2 {p x ^ - l) . 

Thus, the lower bound in the theorem will follow if we show that there are at least b p x/ log log x 
integers m coprime to 2p with m < x / 2 9p<ym ^ +1 . Using Lemma H~6l we have g p (m) + 1 = 
v 2 (X(m)) + v 2 {p 2 — 1). Further, it is easy to see that 2 V2( ~ p2 ^ < 2(\p\ + 1), with equality when 
\p\ + 1 is a power of 2. 

It follows from [TfOl Section 2, Remark 1] that uniformly for all x > 3 and all positive integers 

n, 

log log x | Q / tog(2w) \ 



^ ^ r 



ip(n) V r(i> 

r prime 
n\r— 1 
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We apply this with n = 2 90+1 , where g is the first integer with 2 9Q > 4 log log x. Thus, if 1Z is the 
set of primes r < x with v 2 (r — 1) > go, we have for x sufficiently large, 



V- < - 



r 

reft 

Let 2; = a;/(25|p| log log x). In [l,z] there are (ip(\p\)/(2\p\))z + O p (l) integers coprime to 2p. 
And for a given value of r 6 71 there are at most (cp(\p\)/(2\p\))z/r + O p (l) numbers in [1, z) 
coprime to 2p and divisible by r. It follows that for x sufficiently large depending on the choice of 
p, there are at least 

integers m < z coprime to 2p and not divisible by any prime r G 1Z. (We used that \1Z\ = 
0(x/ log a;) to estimate the O-term above.) 

It remains to note that if m < z, m is coprime to 2p, and m is not divisible by any prime in 1Z, 
then f 2 (A(m)) < g , so that 

2 9pM+i < 2 ^( A M)+^(p 2 -i) < 29 o 2 ^(p 2 -i) < 2 so . 2 (|p| + 1) < 2 S0 ■ 3\p\ < 25\p\ log logs. 
Thus, 2 9 "^ +1 m e B pfi and 2 9 ^ +l m < x, so that 

B ( r ) > ^ X 

lOOp^loglogx 

for x sufficiently large depending on the choice of p. This completes our proof of the lower bound. 
For the upper bound, it suffices to show that 



N(x) := B Pt0 (x) - B P)0 (x/2) = O p 



x 



log log x / 

(With this assumption, no two numbers d counted can have the same odd part.) We shall assume 
that p is not a square, the case when p = p^ for some integer p and j > 1 being only slightly 
more complicated. From Proposition 14.71 N(x) is at most the number of odd numbers m coprime 
top with m < x/2^ m > +1 . Let Nk(x) be the number of odd numbers m < x/2 k+1 with m coprime 
to p and f p (m) = k. Then 

We now concentrate our attention on N k (x) with 2 k < log log x. If f p (m) = k, then m is not 
divisible by any prime r with (p/r) = —1 and 2 k+l \ r — 1. Then, using (14.81) and quadratic 
reciprocity, 



y - 

/ j r 2 k+1 

r<x 
(p/r)=-l 
2 fc+i| r _i 
r prime 



log log x vQ f k_ 
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By Propostion |4.5[ the number of integers m < x/2 k+1 not divisible by any such prime r is at most 

/ x ( log log x 
= °p (^T ex P ^ 2^ 

Summing this expression for 2 k < log logs gives O p (x/ log log a;), which completes the proof of 
Theorem HQ □ 

Remark 4.9. One might wonder if there is a positive constant (3 P such that if p is odd with \p\ > 1, 
then B P fl(x) ~ /3 p x/ log log x as x — > oo. Here we sketch an argument that no such /3 P exists; that 
is, 

n / v ■ f B p,o( x ) / i- B P ,o( x ) / 
< hmml — - — < hmsup — - — : < oo. 

x^oo xj log log X x ^oo Xj log log X 

First note that but for O p (x/ (log a;) 1 / 2 ) values of d < x there is a prime r | d with (p/r) = — 1. 
(We are assuming here that p is not a square.) For such values of d = 2- 7 m, with m odd, we have 
2 | l p (m), so that in the notation above we have f p (m) = f p (m) > 3. Thus it suffices to count 
numbers 2 J m < x with m odd and j > f p (m) > 3. Note that 

fp(m) = v 2 {l p {m)) + v 2 {p 2 - 1) - 1 = v 2 (l p (m)) +h p -l, 

say. Further, 

v 2 {l p (m)) = maxv 2 (l p (r)), 

r\m 

where r runs over the prime divisors of m. We have 
{r prime : v 2 (l p (r)) = k] = 
[^J{r prime : v 2 {r — 1) = k + i, p is a 2' power (mod r) and not a 2 l+1 power (mod r)}. 

For k > (log log logs) 2 , the density of primes r = 1 (mod 2 k ) is so small that we may assume 
that no d is divisible by such a prime r. For k below this bound, the density of primes r with 
v 2 (l p (r)) — his 1/(3 • 2 fe ~ 1 ). Thus, there is a positive constant Ck :P with Ck tP — > 1 as k — > oo such 
that the density of integers m coprime to 2p and with f p (m) < k + h p is asymptotically equal to 

c p (^(2b|)/(2b|))exp(-(loglogx)/(3-2 fc )), 

as x — > oo. Thus, the number of m < x/2 k+hp coprime to 2p and with f p (m) = k + h p — 1 is 
asymptotically equal to 

<^(2|p|) x loglogx / loglogx' 
° k ' p 2\p\ 2 k+h p 3-2 k 6XP V 3 • 2 k 

as x — > oo. This expression then needs to be summed over k. For k small, the count is negligible 
because of the exp factor. For k larger, we can assume that the coefficients p are all 1, and then 
the sum takes on the form 

y>(2|p|) x (log log x) 2 ( log log x 



2\p\2 h v loglogx^ 3-2 2fe 6XP V 3-2 fe 

Letting this sum on k be denoted g(x), it remains to note that g (x) is bounded away from both 
and oo yet does not tend to a limit, cf. [|5] Theorem 3.25]. 
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To prove Theorem 14.21 we first establish the following result. 

Proposition 4.10. Let p be an integer with \p\ > 1. Let d be a positive integer coprime to p such 
that d is divisible by odd primes s, t with 

l p (s) = 2 (mod 4), l p (t) = l (mod 2), (p,-l) s ^U s , (p, -l) t + U t . 

Assume that 4 | l p (d). Then either 4 | d and \d + 1 G (p)d or (p) d is not balanced. 

Proof. Let k = l p (d). First assume that 4 | d and \d + 1 G" (p)^- Let 2 K be the largest power of 2 in 
fc. Write d = 2 J m where m is odd, let 2 Kl be the power of 2 in l p (m), and let 2 K2 = Z p (2- ? ). Then 
k = max-f^!,^}. Suppose that k 2 > K\. We have p k ^ 2 = 1 (mod m) and p fc//2 ^ 1 (mod 2 J ). 
Since 4 | A;, we have p fe / 2 + 1 = 2 (mod 4), and since p k — 1 = (p fc//2 — l)(p fc//2 + 1), we have 
p k l 2 = 1 (mod 2 e_1 ). Thus, p fc / 2 = + 1 (mod d), contrary to our assumption. Hence, we may 
assume that k = k x > k 2 . Note that this inequality holds too in the case that 4 / d, since then, 

K 2 = 0. 

We categorize the odd prime powers r a coprime to p as follows. 

• Type 1: (p, — l) r a = U r a. 

• Type 2: (p, — l) r a ^ V r a. 

• Type 3: It is Type 2 and also l p (r a ) = 2 (mod 4). 

• Type 4: It is Type 2 and also l p (r a ) is odd. 

By assumption d has at least one Type 3 prime power component and at least one Type 4 prime 
power component. We will show that (p)d is not balanced in U^. By Proposition l2.4[ it is sufficient 
to exhibit an odd character x (mod d) that is trivial at p with conductor d! divisible by the same 
odd primes as are in d, and with either d = 2 (mod 4) or djd! odd. 

Let r" 1 \ \d where the power of 2 in ^(r* 1 ) is 2 K1 . (Note that r" 1 cannot be Type 3 nor Type 4, 
since we have Ki = k > 2, so that 4 | ^(r" 1 ).) Consider the Type 1 prime powers in d, other than 
possibly r" 1 in case it is of Type 1 . For each we take the quadratic character and we multiply these 
together to get a character xi whose conductor contains all of the primes involved in Type 1 prime 
powers, except possibly r\. 

If j < 1, we let ip 2 J be the principal character mod 1? . If j > 2, let ip 2J be a primitive character 
mod 2 J with ip 2 j (p) = (, a primitive 2 K2 -th root of unity. Let X2 = XiV^j • 

We choose a character tp r *i mod r" 1 with ip r n (p) = X2(p)~ 1 if X2(p) 1' an d otherwise we 
choose it so that «/) r «i (p) = —1. Thus, this character is non-principal. Let X3 = 4 ) r ^ 1 X2- We now 
have xs{p) = ±1- 

If X3(p) — — 1 we use a Type 3 prime power rg 3 ||d and choose a character ^ r «3 (mod r% 3 ) with 
^ 3 (p) = -1- Let X4 = X3^ r «3. If Xs(p) = 1, we let x± = Xs- We now have xa{p) = 1. 

If X4( — 1) = 1 5 we use a Type 4 prime power r^ 4 ||<i and choose a character ip r a4 (mod r^ 4 ) with 
i> r 2*(p) = 1 and^ 4 (-l) = -1. Let Xs = X^r-- If X4(-l) = -1, we let x 5 = X4- 

All remaining prime powers r a in d are of Type 2. For these we take non-principal characters 
that are trivial on (p, — l) r a, and multiply them in to Xs to form x&- This is the character we are 
looking for, and so (p) d is not balanced. This completes our proof. □ 

Proof of Theorem W2\ In the proof we shall assume that p is neither a square nor twice a square, 
showing in these cases that we may take t p = 1/16. The remaining cases are done with small 
adjustments to the basic argument, but may require a smaller value for e p . 
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Let d < x be coprime to p. The set of primes r / p with r = 1 (mod 4) and for which 
p is a quadratic nonresidue has density 1/4, and in fact, the sum of reciprocals of such primes 
t < x is | log log x + O p (l). (This follows from either (|4.8t and quadratic reciprocity or from the 
Chebotarev density theorem.) Thus by Proposition @3] the number of integers d < x not divisible 
by any of these primes r is O p (x/ (logx) 1//4 ). Thus, we may assume that d is divisible by such a 
prime r and so that 4 | Z p (d). 

Note that if r = 5 (mod 8) and that p is a quadratic residue modulo r, but not a fourth power, 
then any r a is of Type 3. The density of these primes r is 1/16, by the Chebotarev theorem, in fact, 
the sum of reciprocals of such primes r < x is 4- log logs + O p (l). So the number of values of 
d G [3,x] not divisible by at least one of them is O p (x / (log x) 1 / 16 ), using Proposition 14.51 Also 
note that if r = 5 (mod 8) and p is a nonzero fourth power modulo r, then any r a is Type 4. The 
density of these primes r is also 1/16, and again the number of d G [3, x] not divisible by at least 
one of them is O p {xj (logx) 1 / 16 ). 

Thus, the number of values of d < x coprime to p and not satisfying the hypotheses of Proposi- 
tion |4T0] is 0(x/(logx) 1 / 16 ). This completes the proof of Theorem 14.21 □ 

5. The average and normal order of the rank 

In this section we consider the average and normal order of the rank of the curve Ed given in 
Theorem II .li as d varies. 

It is clear from Theorem II . 1 I that for q odd, 



RankE d (F q (u)) < 



d — 2 if d is even 
d — 1 if g? is odd 



with equality when d G B p> \ and q = 1 (mod d). 
For all q and d > 1, it is known HI Prop. 6.9] that 



RankW)) <^ +0 (_A_) 



(Here log„ d is the logarithm of d base q, i.e., logd/ logg.) We do not include the details here, 
but this bound can be proved directly for the the curves in Theorem 11.11 using that theorem. In 
addition, for q odd, considering values of d of the form qf + 1 for some positive integer /, and 
using Theorem ll.il we see that the main term in this inequality is sharp for this family of curves. 

We show below that although the average rank of E d (¥ q (u)) is large — its average for d up to x 
is at least x 1 / 2 — for "most" values of d the rank is much smaller. 

Theorem 5.1. There is an absolute constant a > | with the following property. For each odd 
prime p and finite field ¥ q of characteristic p, with ¥ q (u) and E d as in Theorem \l.l\ we have 



x a < -^Rank£ d (F 9 (u)) < x x ~ 



log log log x/(2 log log x) 



X 

d<x 



for all sufficiently large x depending on the choice of p. 

Proof. This result follows almost immediately from [11 1 Theorem 1]. A result is proved there for 
the average value of the rank of curves in a different family also parametrized by a positive integer 
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d. Using the notation from the present paper, if d E B Pt x the rank of the curve considered in [ITTI is 
within 4 of 

(p(e) 



E 



e>2 



(5.2) 



We have d E B p ,\ implies that e E B p ,\ for all e | d with e > 2. By Theorem II .![ formula (15.21 ) 
is exactly the rank of Ed(¥ q (u)) for d E B Pt i. Since the proof of the lower bound x a in [11] uses 
only values of d E B Pj \, we have the lower bound x a in the present theorem. 

Since the rank of Ed(¥ q (u)) is bounded above by the formula (|5.21) whether or not d is in B Pt \, 
and in fact whether or not (p)d is balanced, the argument given in flTTI for the upper bound gives 
our upper bound here. □ 

Theorem 5.3. For each odd prime p and finite field ¥ q of characteristic p, with ¥ q (u) and Ed as in 
Theorem \l.l\ we have but for o(x / log log x) values of d < x with d E B p that 

RankE d (¥ q (u)) > (l gd) (1+o(1))logloglogd 

as x — > oo. Further, assuming the GRH, we have but for o(x/loglogx) values of d < x with 
d E B p that 

RimkE d (¥ q (u)) < (l gd) (1+o(1))logloglogd 

as x — > oo. Assuming the GRH, this upper bound holds but for o(x) values of d < x coprime to p 
as x — > oo, regardless of whether d E B p . 

Proof. For d E B p , Theorem 11.11 implies that the rank of Ed(¥ q (u)) is at least ip(d)/l q (d) > 
ip(d) I X(d), where A was defined in the previous section as the order of the largest cyclic subgroup 
of Vd- It is shown in the proof of Theorem 2 in that on a set of asymptotic density 1, we have 
(p(d)/X(d) = (log i°g i°g i°g°!. We would like to show this holds for almost all d E B p . Note 

that we have (^(m)/A(m) = (logm)( 1+0 ^^ logloglogm for almost all odd numbers m. We have for 
all odd m and every integer j > that 

¥>M ¥?(2 j m) - y(m) 

A(m) " A(2^m) " A(m) ' K ' 

Thus, for almost all odd numbers m we have for all nonnegative integers j with 2 J < log m that 
<p(2?m) /A(2^m)) = (log(2J'm))( 1+ °( 1 )) i°gi°gi°g(2^). Further, it follows from (ED that but for a set 
of odd numbers m of asymptotic density 0, we have v 2 (\(m)) < 21ogloglogm. It thus follows 
from Proposition l4.7l that for almost all odd numbers m there is some nonnegative j with 2 J m E B p 
and 2 J < logm. By Theorems 14. 1 [ 14.21 almost all members of B p are of this form, and so we have 
the lower bound in the theorem. 

For the upper bound we use an argument in [|6]. There, Corollary 2 and the following remark 
imply that under the assumption of the GRH, for almost all numbers d coprime to p we have 
(f(d)/l q (d) = (l gd)(i+°(i))i°gi°gi°grf. Weusethat^(e)/Zg(e) | <p(d)/l q (d) for e | d and from the 
normal order of the number-of-divisors function r(d), that most numbers d have r(d) < \ogd. It 
thus follows from Theorem [Tj] and the GRH that for almost all numbers d coprime to p that 

Rank£ d (F 9 (u)) < r(d)^j| < (logrf)f|| = (logd)( 1+0 «)^^ 10 ^. 
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We would like to show as well that this inequality continues to hold for almost all d that are 
in B p . As above, the GRH implies that for almost all odd numbers m coprime to p, we have 
<p(m)/l q (m) = (l gm)( 1+0 ( 1 » logloslogm . Since (EH continues to hold with l q in place of A, it 
follows that for almost all odd m and for all j with 1 < 2 3 < logm, that ip(2^m)/l q (2 3 m) = 
(log(2 J ra))( 1+ °( 1 ^ logloglog ( 2: ' m ). Again using the normal order of the number-of-divisors function 
r, we have that for almost all odd m and all j with 1 < 2 J < logm that r(2 J m) < logm. Further, 
as we noted above, from Theorems 14.11 14.21 it follows that almost all members d of B p are of the 
form 2- 7 m with m odd and 2 J < logm. The rank formula in Theorem II . 1 1 implies that the rank of 
E d (¥ q (u)) is bounded above by r(d)(p(d)/l q (d). Thus, for almost all d e i3 p we have the rank at 
most (log d) log log log d . This completes the proof. □ 
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